Enterprise Vault Discovery.cloud User Guide

Last Published:
Product(s): Enterprise Vault.cloud (Version Not Specified)
  1. About Enterprise Vault Discovery.cloud
    1.  
      Introducing Enterprise Vault Discovery.cloud
    2.  
      Discovery.cloud key features
    3.  
      About classification
    4.  
      Discovery.cloud term definitions
  2. Getting started with Discovery.cloud
    1.  
      Logging on to Discovery.cloud
    2. About the Discovery.cloud user interface
      1.  
        About the Investigations tab
      2.  
        About the E-Discovery tab
      3.  
        About the Administration tab
      4.  
        About the Alerts tab
      5.  
        About the Dashboard tab
      6.  
        About the Continuity tab
    3.  
      Accessing your own archived emails
  3. Discovery.cloud roles
    1.  
      About account roles and Discovery.cloud
    2.  
      Account role
    3.  
      Reviewer role
    4.  
      Administrator role
    5. Assigning roles for Discovery.cloud
      1.  
        Assigning the Reviewer role to an account
      2.  
        Assigning the Administrator role to an account
  4. Investigations
    1.  
      About investigations
    2.  
      About the Managed Accounts node
    3.  
      Performing a new search of accounts (Investigations tab)
    4.  
      Saving a search of accounts (Investigations tab)
    5.  
      Viewing or modifying a saved search (Investigations tab)
    6.  
      Generating printable reports for searches (Investigations tab)
    7.  
      Deleting saved searches (Investigations tab)
    8.  
      Working with emails in the Investigations tab
    9.  
      Hiding and unhiding emails
  5. Matter management
    1.  
      About matters in eDiscovery
    2.  
      Matter workflow summary: Discovery Administrator
    3.  
      Customizing the matter review statuses
    4.  
      Creating a matter
    5.  
      Viewing the details of a matter
    6.  
      Editing a matter
    7.  
      Performing a new search of a matter
    8.  
      Saving a search of a matter
    9.  
      Viewing and modifying a saved search of a matter
    10.  
      Applying a search-level legal hold
    11.  
      Assigning an unassigned saved search to reviewers
    12.  
      Generating printable reports for searches
  6. Reviewing and working with emails in eDiscovery
    1.  
      About reviewing matters
    2.  
      Matter workflow summary: reviewer
    3.  
      Reviewing a matter's emails
    4.  
      Applying a matter review status to emails
    5.  
      Applying tags to emails
    6.  
      Adding matter notes to emails
    7.  
      Printing emails
    8.  
      Restoring emails
    9.  
      Forwarding emails
  7. Email export
    1.  
      Exporting emails
    2.  
      Reviewing Export Status
    3.  
      Resubmitting failed export items
    4.  
      Option to maintain folder structure in the export
    5.  
      Canceling Export Batch
    6.  
      Email export FAQ
  8. Collaborative reports
    1.  
      About collaborative eDiscovery reporting
    2.  
      Report by email: Audit trail
    3.  
      Report by Matter: Matter History
    4.  
      Report by Matter: Matter Summary
    5.  
      Report by Archive: eDiscovery dashboard
  9. Discovery.cloud alerts
    1.  
      Creating an alert
  10. Email Continuity
    1.  
      Managing Email Continuity
    2.  
      Viewing Continuity emails
  11. Methods for searching matters and accounts
    1.  
      About Basic Search and Advanced Search
    2.  
      Search syntax for Basic Search and Advanced Search
    3.  
      About stop words and special characters
    4.  
      Phrase searches
    5. Boolean operator searches
      1.  
        AND operator search
      2.  
        OR operator search
      3.  
        NOT operator search
      4.  
        About using multiple Boolean operators
      5.  
        About using Boolean operators with phrase searches
      6.  
        About Boolean operators and special characters
    6.  
      Wildcard searches
    7.  
      Proximity searches
    8.  
      Double-byte character set searches
    9.  
      About enhanced searches in Japanese
    10.  
      Searchable attachment types
    11.  
      Search examples and tips
  12. Methods for searching tables and reports
    1.  
      About Quick Search and Criteria Search
    2.  
      Searching tables, lists, and reports
  13. Discovery.cloud Frequently Asked Questions
    1.  
      Frequently Asked Questions
  14. Best practices, limitations, and known issues
    1.  
      Best practices and limitations with Discovery.cloud
    2.  
      Known issues with Discovery.cloud
  15. Discovery.cloud updates in previous releases
    1.  
      About the Discovery.cloud updates in previous releases
    2.  
      November 2015 updates
    3.  
      February 2015 updates
    4.  
      May 2014 updates
    5.  
      July 2013 updates
    6.  
      May 2013 updates
    7.  
      February/March 2013 updates
    8.  
      November 2012 updates
    9.  
      June 2012 updates
    10.  
      May 2012 updates
    11.  
      March 2012 updates
    12.  
      January/February 2012 updates

Search examples and tips

Examples of using Basic, Advanced, and Quick Search

Suppose that you want to search for the messages that relate to the resetting of a password. You can enter password reset into the Basic Search box and click Search to perform a Basic Search. The space between password and reset is treated as an AND operator, so the returned results contain any messages that include both the word password and the word reset.

Suppose that you now decide to search for the phrase password reset, and to exclude from the results any emails that reference the word Box. You can use an Advanced Search for this purpose. Click the expand icon to display the Advanced Search options. Your original Basic Search is now shown in the first criteria row.

Insert double quotation marks around password reset to specify it as a phrase. Then click + to add a second criteria row. In the new criteria row, select Doesn't Contain and enter Box in the text field.

Click Search to perform the Advanced Search. The search returns any items that do not contain Box but that contain the exact phrase password reset.

You could obtain the same results if you entered the following term in the Basic Search bar:

"password reset" NOT box

Table: List of query search terms lists some possible query search terms along with examples.

Table: List of query search terms

Search term

Data type

Description

Example

_All, Entiremessage

Text

Searches through all default fields. Similar to simple search or not specifying a field.

_All:(test or test2)

"hello world"

Entiremessage:test

Attachments.content

Text

Search by attachment content.

Attachments.content: "Hello World"

Attachments.extension

Text

Search by attachment file type (PDF, DOC, docx, and so on.)

Attachments.extension:docx

Attachments.filename

Text

Search by the file name of the attachment.

Attachments.filename:Report.PDF

Attcount

Integer

Search by the amount of attachments.

Attcount:6

Attflag

Boolean

Search by whether there is an attachment.

Attflag:true

Atttext

Text

Search the content of the attachments.

Atttext:Computers

Atttypes

Text

Search by the attachment type.

Atttypes:PDF

Cc

Text

Search by carbon copy recipients.

Cc:JoeBlogs@example.com

Sender:*@example.com

Classification.tags

Text

Search by classification tags.

Classification.tags:PII

Hidden

Boolean

Search whether email is visible to end user or not.

Email Hidden:

Hidden:(1)

Email Visible:

NOT Hidden:(1)

Inbound

Boolean

Search inbound emails.

Inbound:false

Ipheader

IP Address

Search by the IP header of the email.

Specific IP Address:

Ipheader:(10.201.1.1)

IP Address using wildcards:

Ipheader:(10.*.1.1) AND Ipheader:(10.201.?.1)

Maildate

Date Time

Search by the date the message was sent.

Closed Range:

Maildate: [2018-01-01T00:00:00 TO 2019-12-31T23:59:59]

Open Range:

Maildate: {2018-01-01T00:00:00 TO 2019-12-31T23:59:59}

Messagesizeinkb

Floating Point Number

Search by total size of the email.

Messagesizeinkb:[2.5 TO 5]

Outbound

Boolean

Search whether a user sent the email.

Outbound:true

Sender

Text

Search by the sender address(es).

Sender:JoeBlogs@example.com

Sender:*@example.com

Subject

Text

Search by the subject of the email.

Subject:IT

Textbody

Text

Search the text content of the email.

Textbody: "Hello World!"

To

Text

Search by recipient.

To:JoeBlogs@example.com

To:*@example.com

Examples of Query Searches:

  • MailDate:[2016-05-14T05:00:00 TO 2019-06-18T08:00:00]

  • Messagesizeinkb:[0.0 TO 11.5]

  • Subject:(export OR report)

  • MailDate:[2016-05-14T05:00:00 TO 2019-06-18T08:00:00] AND subject:archive

  • Sender:(*@domain.com OR *@domain2.com OR *@domain3.com)

  • Atttypes:(pdf OR docx) AND atttext:process

  • Attachments.filename:(Report.PDF or Export.docx)

Searching the From, To, BCC and CC fields

The To, From, and From/To search options are available within an Advanced Search.

  • The To option provides search results from the To, BCC, and CC fields.

  • The From option provides search results from the From field.

  • The From/To option provides search results from the From and To fields.

Searching within specific email domains

One way to search for items within a specific domain is to enter the domain name in the To field of an Advanced Search.

You can use wildcards to search for results from a group of similar domains. For example mycloud* returns emails for the domains that begin with mycloud.